AMQ-9201 - Update Jolokia default access configuration

(cherry picked from commit 6120169e56)
This commit is contained in:
Christopher L. Shannon (cshannon) 2023-02-01 07:04:56 -05:00 committed by Jean-Baptiste Onofré
parent 6edc4d3ab8
commit 5c8d457d9f
1 changed files with 33 additions and 1 deletions

View File

@ -22,8 +22,35 @@
<strict-checking/>
</cors>
<!-- deny calling operations or getting attributes from these mbeans -->
<!-- By default don't allow write or exec operations -->
<commands>
<command>read</command>
<command>list</command>
<command>version</command>
<command>search</command>
</commands>
<allow>
<!-- Allow all operations for the broker itself -->
<mbean>
<name>org.apache.activemq:*</name>
<attribute>*</attribute>
<operation>*</operation>
</mbean>
<!-- Allow all operations for Jolokia Config -->
<mbean>
<name>jolokia:type=Config</name>
<operation>*</operation>
</mbean>
</allow>
<!-- deny all operations or getting attributes from these mbeans -->
<deny>
<mbean>
<name>org.apache.logging.log4j2:*</name>
<attribute>*</attribute>
<operation>*</operation>
</mbean>
<mbean>
<name>com.sun.management:type=DiagnosticCommand</name>
<attribute>*</attribute>
@ -34,6 +61,11 @@
<attribute>*</attribute>
<operation>*</operation>
</mbean>
<mbean>
<name>jdk.management.jfr:type=FlightRecorder</name>
<attribute>*</attribute>
<operation>*</operation>
</mbean>
</deny>
</restrict>